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IN THE CLAIMS 

1. [Cancelled] 

2. [amended herein] A method according to claim 48, charact e r i z e d i n that i n that i t 
furth e r compr i s e s th e st e ps of further comprising : 

- when processing at least one captured data packet, determining (304, 610) a 
modification command affecting at le ast s aid at least one captured data packet, and 

- maintaining (305, 610) a list of modification commands, said list enabling modification of 
captured data packets. 



1 3. [amended herein] A method according to claim 2 , charact e riz e d i n that i t furth e r 

2 j oompr i s e s th e st e ps of further comprising : 

3 - modifying ( 306, 612) captured data packets based on said list of modification 

4 commands, and 

5 - releasing (308, 614) modified captured data packets. 



1 |4. [amended herein] A method according to claim 48, further comprising the step of 

2 discarding charact e r i zod i n that captured data packets that are declined from 

3 processing ar e d i scard e d (408, 604). 

1 |5. [amended herein] A method according to claim 48. character i zed i n that wherein 

2 captured data packets that are declined from processing are delayed (410, 603). 



1 6. [amended herein] A method accord i ng to c l a i m 2, charactor i zod i n that i t furth e r 
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compr i s e s th e st e ps of for handling data packets, said data packets belonging to a set of 
data packets, said method comprising: 

- capturing data packets. 

- accepting a captured data packet for processing based on said captured data packet 



and data packets captured prior to said captured data packet. 

- when processing at least one captured data packet accepted for processing. 



determining a modification command affecting at least said at least one captured data 
packet. 

- maintaining a list of modification commands, said list enabling modification of captured 



data packets. 

- declining {404) a captured data packet from processing, if said captured data packet is 
already processed and modification commands induced by said captured data packet are 
already determined and maintained in said list of modification commands, 

- modifying (306, 612) s aid captured data packet based on said list of modification 
commands, and 

- releasing (308, 614) t he modified captured data packet. 



1 
2 
3 
4 
5 



7. [amended herein] A method according to claim 48, oharact e r i zod i n that in that i n that 
i t furth e r compr i s e s tho ot e ps of further comprising : 

- declining (404) a captured data packet from processing, if said captured data packet is 
already processed, and 

- releasing (308) t he captured data packet. 



|8. [amended herein] A method according to c l a i m 1, oharact e r i zod i n that f or handling 
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data packets, said data packets belonging to a eai4 set of data packets J=tas- having at 
least partly hierarchical structure, said method -fttfthei^omprising th e st e p of: 

- capturing data packets. 

- accepting a captured data packet for processing or declining a captured data packet 



from processing based on said captured data packet and data packets captured prior to 
said captured data packet. 

said accepting comprising accepting (301, 411, 414, 422, 430) data packets for 
processing in the order specified by said at least partly hierarchical structure. 



1 |9. [amended herein] A method according to claim 8 . ch a ract e r i z e d i n comprising: 

2 - accepting (411) a captured data packet for processing, if data packet(s) immediately 

3 preceding said captured data packet in said at least partly hierarchical structure is(are) 

4 already processed. 

1 1 10. [amended herein] A method according to claim 8 . charact e r i z e d i n comprising 

2 - declining (404) a captured data packet from processing, if a data packet immediately 

3 preceding said captured data packet in said at least partly hierarchical structure is not yet 

4 captured. 



1 |1 1 . [amended herein] A method according to claim 10 . charactor i zod i n comprising 

2 - delaying (410, 603) data packets declined from processing, 

3 - accepting (414) a delayed data packet for processing and processing (302) s aid 

4 delayed data packet, if data packet(s) immediately preceding said delayed data packet in 

5 said at least partly hierarchical structure is(are) already processed, and 
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6 - releasing (308) t he delayed data packet. 

1 1 12. [amended herein] A method according to claim 10 , ch a ract e r i z e d i n comprising 

2 - delaying (410, 603) data packets declined from processing, 

3 - accepting (301, 411, 414, 422, 430) a captured data packet for processing, 

4 - accepting 4444> delayed data packet(s) for processing, if data packet(s) immediately 

5 preceding said delayed data packet(s) in said at least partly hierarchical structure is(are) 

6 accepted for processing, 

7 - processing (418, 424) said delayed data packet(s) together with said captured data 

8 packet, and 

9 - releasing {308)- the delayed and the captured data packets. 

1 |13. [amended herein] A method according to claim 8 . charact e r i z e d i n that w herein 

2 said at least partly hierarchical structure is a sequence of data packets. 

1 1 14. [amended herein] A method according to claim 8 . charact e r i z e d w herein in that 

2 said at least partly hierarchical structure is a hierarchically structured tree. 



1 15. [cancelled] 

1 16. [amended herein] A method accord i ng to c l a i m 15, character i zed i n f or handling 

2 data packets, said data packets belonging to a set of data packets and forming a plurality 

3 of groups of data packets, said method comprising: 

4 - capturing data packets, 
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5 - declining (AOA) a captured data packet belonging to a first group of data packets from 

6 processing, if all other data packets belonging to said first group of data packets are not 

7 yet captured, and delaying 4440)- said captured data packet, and 

8 - processing (421) a captured data packet belonging to a first group of data packets 

9 together with delayed data packets belonging to said first group of data packets, if said 
1 0 captured data packet belonging to said first group and said delayed data packets 

1 1 belonging to said first group form a full first group of data packets. 

1 1 17. [amended herein] A method according to daim4S-16, character i z e d i n that w herein 

2 said plurality of groups of data packets further belong to a set of groups having at least 

3 partly hierarchical structure, and i n that sa i d m e thod furth e r compr i s e s th e st e p of: 

4 j further comprising: 

5 - processing (302) s aid groups of captured data packets in the order specified by said at 

6 least partly hierarchical structure. 

1 |18. [amended herein] A method according to claim 26. charact e r i z e d i n that wherein 

2 said data packets belonging to a set of data packets are first handled (800) in a first node 

3 of a cluster of network elements and said list of modification commands is maintained in 

4 said first node, and in that said method further comprises the step of: 

5 - transmitting (804) s aid list of modification commands from said first node to a second 

6 node of said cluster of network elements. 

1 19. [amended herein] A method according to claim 18, charactor i zod i n that i t furth e r 

2 I compr i s e s th e st e p of further comprising: 
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3 - after said transmission of said list, handling (806) said set of data packets in said 

4 second node. 

1 20. [amended herein] A method according to claim 19, charactor i zod i n that i t furth e r 

2 j oompr i s e s th e st e ps of further comprising : 

3 - when beginning to handle said data packets, storing in said first node in a connection 

4 jdata structure an entry representing said set of data packets, and 

5 - before handling said set of data packets in said second node, transmitting said entry 

6 from said first node to said second node. 



7 
8 
9 



21. [amended herein] A method according to claim 46, charact e r i z e d in that i t furth e r 
compr i s e s th e st e p of further comprising : 



10 - defining (700) a plurality of first pieces of information, which are to be replaced in the 

1 1 captured data packets with a plurality of corresponding second pieces of information, 

1 2 jand i n that i n w herein, in the processing of captured data packets, 

1 3 - said first pieces of information are searched fo r (702) , and 

14 - if a first piece of information is found, at least one modification command specifying at 

1 5 least the replacement of said first piece of information with a corresponding second 

1 6 piece of information is determined (704). 

1 |22. [amended herein] A method according to claim 21 1 charactoriz e d i n that wherein . 

2 if the length of said first piece of information is different from the length of said 

3 corresponding second piece of information and if said first piece of information is found 

4 in pay load of data packet(s), said modification command comprises instructions for 
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changing value of at least one header field in a data packet. 
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23. [amended herein] A method according to claim 26, charactor i zod i n that wherein a 
modification command comprises 

- a first identifier indicating the beginning of a first piece of information in the original 
captured data packets, the first piece of information being subject to be replaced by a 
second piece of information, 

- the length of the first piece of information, and 

- the second piece of information. 
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24. [amended herein] A method accord i ng to claim 23, charactor i zod i n that f or 
handling data packets, said data packets belonging to a set of data packets, said method 



comprising: 

- capturing data packets, 

- processing captured data packets: 

- accepting a captured data packet for processing based on said captured data packet 



and data packets captured prior to said captured data packet. 

- when processing at least one captured data packet accepted for processing. 



determining a modification command affecting at least said at least one captured data 
packet. 

- maintaining a list of modification commands, said list enabling modification of captured 



data packets. 

wherein a modification command furth e r comprises 
a first identifier indicating the beginning of a first piece of information in the original 
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1 5 captured data packets, the first piece of information being-subject to be replaced by a 

1 6 second piece of information. 

1 7 - the length of the first piece of information. 

1 8 - the second piece of information. 



19 - a second identifier indicating the beginning of the second piece of information in the 

2 0 modified captured data packets, 

21 - an offset between a third identifier indicating the end of the first piece of information in 

2 2 the original captured data packets and a fourth identifier indicating the end of the second 

2 3 piece of information in the modified captured data packets, and 

2 4 - the length of the second piece of information. 

1 |25. [amended herein] A method according to claim-46, character i zed i n that wherein 

2 said data packets contain information fragments belonging to a sequence of information 

3 fragments, said method further comprising the steps of: 

4 - processing (302, 418, 424, 432, 608) t he information fragments of the captured data 

5 packets in the order specified by said sequence. 

1 |26. [amended herein] A method according to claim 25 r charact e riz e d i n that wherein 

2 each information fragment of said sequence is processed only once. 

1 27. [amended herein] A method accord i ng to c l a i m 25, character i z e d i n that sa i d 

2 m e thod furth e r compris e s th e st e ps of: for handling data packets, said data packets 

3 belonging to a set of data packets, said method comprising: 

4 - capturing data packets, said data packets containing information fragments belonging to 
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5 | a sequence of information fragments . 

6 - declining (404) a captured data packet from processing, if a data packet containing the 

7 information fragment immediately preceding the information fragments of said captured 

8 data packet in said sequence is not yet captured, and 

9 - accepting (111) a captured data packet for processing, if a data packet containing the 
1 0 information fragment immediately preceding the information fragments of said captured 

data packet in said sequence is already processed, whereby each information fragment 
of said sequence is processed only once . 



1 1 
1 2 



1 |28. [amended herein] A method according to claim 25 . charact e r i z e d i n that wherein 

2 said sequence of information fragments is a sequence of octets of data according to 

3 Transfer Control Protocol. 

1 29. [amended] A software entity (900) f or handling data packets, said data packets 

2 belonging to a set of data packets, said software entity comprising 

3 - program code means ( 9 01) f or capturing data packets, 

4 character i z e d i n that it furth e r compr i s e s: 

5 - program code means (904) f or accepting a captured data packet for processing or 

6 declining a captured data packet from processing based on said captured data packet 

7 and data packets captured prior to said captured data packet. 



1 30. [amended herein] A software entity {9GQ)-according to claim 29, charact e r i z e d i n 

2 j that i t furth e r compr i s e s further comprising: 

3 - program code means ( 9 08) f or maintaining a list of modification commands, said list 
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4 enabling modification of captured data packets. 

1 31. [amended herein] A software entity (9©0)-according to claim 30, charactor i zod i n 

2 j that i t furth e r compr i s e s further comprising: 

3 - program code means ( 9 10) f or modifying captured data packets based on said list of 

4 modification commands, and 

5 - program code means ( 9 12) f or releasing modified captured data packets. 

1 32. [amended herein] A software entity ( 9 20) f or processing data, said software entity 

2 being adapted to receive data, and said software entity comprising 

3 - program code means (902) f or processing received data, 

4 - program code means ( 9 06) f or determining a modification command affecting at least 

5 received data, as a response to processing said data, and 

6 - said software entity being adapted to output said modification command. 

1 33. [original] A computer program comprising program code for performing all the steps 

2 of Claim 1 when said program is run on a computer. 

1 34. [original] A computer program product comprising program code means stored on a 

2 computer readable medium for performing the method of Claim 1 when said program 

3 product is run on a computer. 

1 35. [amended herein] A network element -(9§2Hor handling data packets, said data 

2 packets belonging to a set of data packets, said network element comprising 
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3 - means 4854)- for capturing data packets, 

4 charact e riz e d i n that i t furth e r compr i s e s: 

5 - means -(OSSHor accepting a captured data packet for processing or declining a 

6 captured data packet from processing based on said captured data packet and data 

7 packets captured prior to said captured data packet. 

1 36. [amended herein] A network element <(©§2)-according to claim 35, charact e r i z e d i n 

2 j that i t furth e r compr i s e s further comprising: 

3 - means ( 9 56) f or processing a captured data packet, and 

4 - means (960) f or determining a modification command affecting at least one captured 

5 data packet, as a response to processing said at least one captured data packet. 

1 37. [amended herein] A network element cluster {9S0)-for handling data packets, said 

2 data packets belonging to a set of data packets, at least one node ( 9 52) of said network 

3 element cluster comprising 

4 - means 49S4)-for capturing data packets, 

5 charact e r i zed i n that i t furth e r compr i s e s: 

6 - means 49§8)-for accepting a captured data packet for processing or declining a 

7 captured data packet from processing based on said captured data packet and data 

8 packets captured prior to said captured data packet. 

1 38. [amended herein] A network element cluster {95Q)-according to claim 37, charac - 

2 j t e r i z e d i n that wherein said at least one node (852) f urther comprises 

3 - means (962) f or maintaining a list of modification commands, said list enabling 
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4 modification of captured data packets, and 

5 - means (964) f or transmitting said list of modification commands from said node to 

6 another node of said cluster of network elements. 

1 39. [new] A storage medium carrying a computer-executable software entity for 

2 handling data packets, said data packets belonging to a set of data packets, said 

3 software entity comprising 

4 - program code configured to capture data packets, 

5 - program code configured to accepting a captured data packet for processing based on 

6 said captured data packet and data packets captured prior to said captured data packet, 

7 - program code configured to, when processing at least one captured data packet 

8 accepted for processing, determine a modification command affecting at least said at 

9 least one captured data packet, 

1 0 - program code configured to maintain a list of modification commands, said list enabling 

1 1 modification of captured data packets, 

1 2 - program code configured to decline a captured data packet from processing, if said 

1 3 captured data packet is already processed and modification commands induced by said 

1 4 captured data packet are already determined and maintained in said list of modification 

1 5 commands, 

1 6 - program code configured to modify said captured data packet based on said list of 

1 7 modification commands, and 

1 8 - program code configured to release the modified captured data packet. 

1 40. [new] A storage medium carrying a computer-executable software entity for 
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2 handling data packets, said data packets belonging to a set of data packets having at 

3 least partly hierarchical structure, said software entity comprising: 

4 - program code configured to capture data packets, 

5 - program code configured to accept a captured data packet for processing or declining 

6 a captured data packet from processing based on said captured data packet and data 

7 packets captured prior to said captured data packet such that data packets are accepted 

8 for processing in the order specified by said at least partly hierarchical structure. 

1 41. [new] A storage medium carrying a computer-executable software entity for 

2 handling data packets, said data packets belonging to a set of data packets and forming a 

3 plurality of groups of data packets, said software entity comprising: 

4 - program code configured to capture data packets, 

5 - program code configured to decline a captured data packet belonging to a first group of 

6 data packets from processing, if all other data packets belonging to said first group of 

7 data packets are not yet captured, and delaying said captured data packet, and 

8 - program code configured to process a captured data packet belonging to a first group 

9 of data packets together with delayed data packets belonging to said first group of data 
1 0 packets, if said captured data packet belonging to said first group and said delayed data 
1 1 packets belonging to said first group form a full first group of data packets. 

1 42. [new] A storage medium carrying a computer-executable software entity for 

2 handling data packets, said data packets belonging to a set of data packets and forming a 

3 plurality of groups of data packets, said software entity comprising: 

4 - program code configured to capture data packets, said data packets containing 
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5 information fragments belonging to a sequence of information fragments, 

6 - program code configured to decline a captured data packet from processing, if a data 

7 packet containing the information fragment immediately preceding the information 

8 fragments of said captured data packet in said sequence is not yet captured, and 

9 - program code configured to accept a captured data packet for processing, if a data 
1 0 packet containing the information fragment immediately preceding the information 

1 1 fragments of said captured data packet in said sequence is already processed, whereby 

1 2 each information fragment of said sequence is processed only once. 

1 43. [new] A network element for handling data packets, comprising 

2 - program code configuring the network element to capture data packets, said data 

3 packets belonging to a set of data packets, 

4 - program code configuring the network element to accept a captured data packet for 

5 processing based on said captured data packet and data packets captured prior to said 

6 captured data packet, 

7 - program code configuring the network element to, when processing at least one 

8 captured data packet accepted for processing, determine a modification command 

9 affecting at least said at least one captured data packet, 

1 0 - program code configuring the network element to maintain a list of modification 

1 1 commands, said list enabling modification of captured data packets, 

1 2 - program code configuring the network element to decline a captured data packet from 

1 3 processing, if said captured data packet is already processed and modification 

1 4 commands induced by said captured data packet are already determined and maintained 

1 5 in said list of modification commands, 
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1 6 - program code configuring the network element to modify said captured data packet 

1 7 based on said list of modification commands, and 

1 8 - program code configuring the network element to release the modified captured data 

1 9 packet. 

1 44. [new] A network element for handling data packets, comprising 

2 - program code configuring the network element to capture data packets, said data 

3 packets belonging to a set of data packets having at least partly hierarchical structure, 

4 - program code configuring the network element to accept a captured data packet for 

5 processing or declining a captured data packet from processing based on said captured 

6 data packet and data packets captured prior to said captured data packet such that data 

7 packets are accepted for processing in the order specified by said at least partly 

8 hierarchical structure. 



1 45. [new] A network element for handling data packets, comprising 

2 - program code configuring the network element to capture data packets, said data 

3 packets belonging to a set of data packets and forming a plurality of groups of data 

4 packets, 

5 - program code configuring the network element to decline a captured data packet 

6 belonging to a first group of data packets from processing, if all other data packets 

7 belonging to said first group of data packets are not yet captured, and delaying said 

8 captured data packet, and 

9 - program code configuring the network element to process a captured data packet 

1 0 belonging to a first group of data packets together with delayed data packets belonging 



KOL-019 Amend 9_05 



21 



1 1 to said first group of data packets, if said captured data packet belonging to said first 

1 2 group and said delayed data packets belonging to said first group form a full first group 

1 3 of data packets. 

1 46. [new] A network element for handling data packets, comprising 

2 - program code configuring the network element to capture data packets, said data 

3 packets belonging to a set of data packets and forming a plurality of groups of data 

4 packets and containing information fragments belonging to a sequence of information 

5 fragments, 

6 - program code configuring the network element to decline a captured data packet from 

7 processing, if a data packet containing the information fragment immediately preceding 

8 the information fragments of said captured data packet in said sequence is not yet 

9 captured, and 

1 0 - program code configuring the network element to accept a captured data packet for 

1 1 processing, if a data packet containing the information fragment immediately preceding 

1 2 the information fragments of said captured data packet in said sequence is already 

1 3 processed, whereby each information fragment of said sequence is processed only 

1 4 once. 
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